An open index of dependabot pull requests across open source projects.

Bump the development-dependencies group across 1 directory with 134 updates

Open
Number: #46
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: August 19, 2025 at 07:28 AM UTC
(18 days ago)
Updated: August 25, 2025 at 10:31 PM UTC
(12 days ago)
Labels:
dependencies javascript
Description:

Bumps the development-dependencies group with 41 updates in the / directory:

Package From To
@eslint/js 9.24.0 9.33.0
@testing-library/jest-dom 6.6.3 6.7.0
@types/express 5.0.1 5.0.3
@types/node 22.14.0 24.3.0
@typescript-eslint/eslint-plugin 8.29.1 8.40.0
@typescript-eslint/parser 8.29.1 8.40.0
@vitejs/plugin-react 4.3.4 5.0.0
@vitest/coverage-v8 3.1.1 3.2.4
eslint 9.24.0 9.33.0
eslint-plugin-import 2.31.0 2.32.0
eslint-plugin-react-refresh 0.4.19 0.4.20
jsdom 26.0.0 26.1.0
lint-staged 15.5.0 16.1.5
prettier 3.5.3 3.6.2
typescript 5.8.3 5.9.2
typescript-eslint 8.29.1 8.40.0
vite 6.2.5 7.1.2
@adobe/css-tools 4.4.2 4.4.4
@asamuzakjp/css-color 3.1.1 3.2.0
@babel/runtime 7.27.0 7.28.3
brace-expansion 1.1.11 1.1.12
@jridgewell/sourcemap-codec 1.5.0 1.5.5
@testing-library/dom 10.4.0 10.4.1
@types/babel__traverse 7.20.7 7.28.0
@types/body-parser 1.19.5 1.19.6
@types/express-serve-static-core 5.0.6 5.0.7
@types/http-errors 2.0.4 2.0.5
@types/qs 6.9.18 6.14.0
@types/send 0.17.4 0.17.5
@types/serve-static 1.15.7 1.15.8
agent-base 7.1.3 7.1.4
cssstyle 4.3.0 4.6.0
decimal.js 10.5.0 10.6.0
esbuild 0.25.2 0.25.9
expect-type 1.2.1 1.2.2
istanbul-reports 3.1.7 3.2.0
nwsapi 2.2.20 2.2.21
parse5 7.2.1 7.3.0
tldts 6.1.85 6.1.86
tr46 5.1.0 5.1.1
ws 8.18.1 8.18.3

Updates @eslint/js from 9.24.0 to 9.33.0

Release notes

Sourced from @​eslint/js's releases.

v9.33.0

Features

  • e07820e feat: add global object access detection to no-restricted-globals (#19939) (sethamus)
  • 90b050e feat: support explicit resource management in one-var (#19941) (Sweta Tanwar)

Bug Fixes

  • 732433c fix: allow any type for meta.docs.recommended in custom rules (#19995) (Francesco Trotta)
  • e8a6914 fix: Fixed potential bug in check-emfile-handling.js (#19975) (諏訪原慶斗)

Documentation

  • 34f0723 docs: playground button for TypeScript code example (#19671) (Tanuj Kanti)
  • dc942a4 docs: Update README (GitHub Actions Bot)
  • 5a4b6f7 docs: Update no-multi-assign.md (#19979) (Yuki Takada (Yukinosuke Takada))
  • 247e156 docs: add missing let declarations in no-plusplus (#19980) (Yuki Takada (Yukinosuke Takada))
  • 0d17242 docs: Update README (GitHub Actions Bot)
  • fa20b9d docs: Clarify when to open an issue for a PR (#19974) (Nicholas C. Zakas)

Build Related

  • 27fa865 build: use ESLint class to generate formatter examples (#19972) (Milos Djermanovic)

Chores

  • 4258046 chore: update dependency @​eslint/js to v9.33.0 (#19998) (renovate[bot])
  • ad28371 chore: package.json update for @​eslint/js release (Jenkins)
  • 06a22f1 test: resolve flakiness in --mcp flag test (#19993) (Pixel998)
  • 54920ed test: switch to Linter.Config in ESLintRules type tests (#19977) (Francesco Trotta)

v9.32.0

Features

  • 1245000 feat: support explicit resource management in core rules (#19828) (fnx)
  • 0e957a7 feat: support typescript types in accessor rules (#19882) (fnx)

Bug Fixes

  • 960fd40 fix: Upgrade @​eslint/js (#19971) (Nicholas C. Zakas)
  • bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)
  • d498887 fix: bump @​eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)
  • f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)
  • 7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#19944) (ntnyq)
  • 3173305 fix: update execScript message in no-implied-eval rule (#19937) (TKDev7)

Documentation

  • 86e7426 docs: Update README (GitHub Actions Bot)

Chores

  • 50de1ce chore: package.json update for @​eslint/js release (Jenkins)
  • 74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)
  • 2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)
  • b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)
  • f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)
  • e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)
  • e855717 chore: switch performance tests to hyperfine (#19919) (Francesco Trotta)

... (truncated)

Changelog

Sourced from @​eslint/js's changelog.

v9.33.0 - August 8, 2025

  • 4258046 chore: update dependency @​eslint/js to v9.33.0 (#19998) (renovate[bot])
  • ad28371 chore: package.json update for @​eslint/js release (Jenkins)
  • 06a22f1 test: resolve flakiness in --mcp flag test (#19993) (Pixel998)
  • 732433c fix: allow any type for meta.docs.recommended in custom rules (#19995) (Francesco Trotta)
  • 34f0723 docs: playground button for TypeScript code example (#19671) (Tanuj Kanti)
  • dc942a4 docs: Update README (GitHub Actions Bot)
  • 5a4b6f7 docs: Update no-multi-assign.md (#19979) (Yuki Takada (Yukinosuke Takada))
  • 247e156 docs: add missing let declarations in no-plusplus (#19980) (Yuki Takada (Yukinosuke Takada))
  • 0d17242 docs: Update README (GitHub Actions Bot)
  • e07820e feat: add global object access detection to no-restricted-globals (#19939) (sethamus)
  • fa20b9d docs: Clarify when to open an issue for a PR (#19974) (Nicholas C. Zakas)
  • 54920ed test: switch to Linter.Config in ESLintRules type tests (#19977) (Francesco Trotta)
  • e8a6914 fix: Fixed potential bug in check-emfile-handling.js (#19975) (諏訪原慶斗)
  • 90b050e feat: support explicit resource management in one-var (#19941) (Sweta Tanwar)
  • 27fa865 build: use ESLint class to generate formatter examples (#19972) (Milos Djermanovic)

v9.32.0 - July 25, 2025

  • 960fd40 fix: Upgrade @​eslint/js (#19971) (Nicholas C. Zakas)
  • 50de1ce chore: package.json update for @​eslint/js release (Jenkins)
  • bbf23fa fix: Refactor reporting into FileReport (#19877) (Nicholas C. Zakas)
  • 74f01a3 ci: unpin jiti to version ^2.5.1 (#19970) (루밀LuMir)
  • d498887 fix: bump @​eslint/plugin-kit to 0.3.4 to resolve vulnerability (#19965) (Milos Djermanovic)
  • 2ab1381 ci: pin jiti to version 2.4.2 (#19964) (Francesco Trotta)
  • b7f7545 test: switch to flat config mode in SourceCode tests (#19953) (Milos Djermanovic)
  • f5a35e3 test: switch to flat config mode in eslint-fuzzer (#19960) (Milos Djermanovic)
  • f46fc6c fix: report only global references in no-implied-eval (#19932) (Nitin Kumar)
  • 86e7426 docs: Update README (GitHub Actions Bot)
  • e22af8c refactor: use CustomRuleDefinitionType in JSRuleDefinition (#19949) (Francesco Trotta)
  • 1245000 feat: support explicit resource management in core rules (#19828) (fnx)
  • e855717 chore: switch performance tests to hyperfine (#19919) (Francesco Trotta)
  • 0e957a7 feat: support typescript types in accessor rules (#19882) (fnx)
  • 2f73a23 test: switch to flat config mode in ast-utils tests (#19948) (Milos Djermanovic)
  • 7863d26 fix: remove outdated types in ParserOptions.ecmaFeatures (#19944) (ntnyq)
  • c565a53 chore: exclude further_reading_links.json from Prettier formatting (#19943) (Milos Djermanovic)
  • 3173305 fix: update execScript message in no-implied-eval rule (#19937) (TKDev7)

v9.31.0 - July 11, 2025

  • 3ddd454 chore: upgrade to @eslint/js@9.31.0 (#19935) (Francesco Trotta)
  • d5054e5 chore: package.json update for @​eslint/js release (Jenkins)
  • 0f4a378 chore: update eslint (#19933) (renovate[bot])
  • 664cb44 docs: Update README (GitHub Actions Bot)
  • 07fac6c fix: retry on EMFILE when writing autofix results (#19926) (TKDev7)
  • 35cf44c feat: output full actual location in rule tester if different (#19904) (ST-DDT)
  • 40dbe2a docs: fix mismatch between globalIgnores() code and text (#19914) (MaoShizhong)
  • 76c2340 chore: bump mocha to v11 (#19917) (루밀LuMir)
  • 28cc7ab fix: Remove incorrect RuleContext types (#19910) (Nicholas C. Zakas)

... (truncated)

Commits
  • ad28371 chore: package.json update for @​eslint/js release
  • 50de1ce chore: package.json update for @​eslint/js release
  • d5054e5 chore: package.json update for @​eslint/js release
  • b3dbc16 chore: package.json update for @​eslint/js release
  • 5a5d526 chore: package.json update for @​eslint/js release
  • acf2201 chore: package.json update for @​eslint/js release
  • 844f5a6 chore: package.json update for @​eslint/js release
  • ecaef73 chore: package.json update for @​eslint/js release
  • 7bc6c71 feat: add no-unassigned-vars rule (#19618)
  • 35304dd chore: add missing funding field to packages (#19684)
  • Additional commits viewable in compare view

Updates @testing-library/jest-dom from 6.6.3 to 6.7.0

Release notes

Sourced from @​testing-library/jest-dom's releases.

v6.7.0

6.7.0 (2025-08-13)

Features

v6.6.4

6.6.4 (2025-07-26)

Performance Improvements

Commits

Updates @types/express from 5.0.1 to 5.0.3

Commits

Updates @types/node from 22.14.0 to 24.3.0

Commits

Updates @typescript-eslint/eslint-plugin from 8.29.1 to 8.40.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.40.0

8.40.0 (2025-08-18)

🩹 Fixes

  • typescript-eslint: export plugin, parser, and configs that are compatible with both defineConfig() and tseslint.config() (#11475)
  • typescript-estree: correct range of import assertion with trailing comma (#11478)
  • utils: correct calculateConfigForFile return type (#11451)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.39.1

8.39.1 (2025-08-11)

🩹 Fixes

  • typescript-eslint: handle file:// urls in stack trace when inferring tsconfigRootDir (#11464)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.39.0

8.39.0 (2025-08-04)

🚀 Features

  • update to TypeScript 5.9.2 (#11445)
  • eslint-plugin: [naming-convention] add enumMember PascalCase default option (#11127)
  • eslint-plugin: add no-unnecessary-type-conversion to strict-type-checked ruleset (#11427)
  • eslint-plugin: [only-throw-error] support yield/await expressions (#11417)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] ignore check option for most RHS of a chain (#11272)
  • eslint-plugin: [no-unsafe-assignment] add an unsafeObjectPattern message (#11403)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.40.0 (2025-08-18)

🚀 Features

  • typescript-estree: forbid invalid keys in EnumMember (#11232)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

8.39.1 (2025-08-11)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.39.0 (2025-08-04)

🚀 Features

  • eslint-plugin: [only-throw-error] support yield/await expressions (#11417)
  • eslint-plugin: add no-unnecessary-type-conversion to strict-type-checked ruleset (#11427)
  • update to TypeScript 5.9.2 (#11445)
  • eslint-plugin: [naming-convention] add enumMember PascalCase default option (#11127)

🩹 Fixes

  • eslint-plugin: [no-unsafe-assignment] add an unsafeObjectPattern message (#11403)
  • eslint-plugin: [prefer-optional-chain] ignore check option for most RHS of a chain (#11272)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

8.38.0 (2025-07-21)

🩹 Fixes

  • disallow extra properties in rule options (#11397)
  • eslint-plugin: [consistent-generic-constructors] resolve conflict with isolatedDeclarations if enabled in constructor option (#11351)

... (truncated)

Commits
  • 60c3b26 chore(release): publish 8.40.0
  • 7648622 fix(typescript-estree): revert #11232 (feat(typescript-estree): forbid invali...
  • d50a6b1 feat(typescript-estree): forbid invalid keys in EnumMember (#11232)
  • b2ee794 chore(release): publish 8.39.1
  • fee2bc6 chore: update eslint-plugin-eslint-plugin (#11449)
  • c98d513 chore(release): publish 8.39.0
  • a8def4b fix(eslint-plugin): [no-unsafe-assignment] add an unsafeObjectPattern messa...
  • 422e3e2 feat(eslint-plugin): [only-throw-error] support yield/await expressions (#11417)
  • e901ad8 fix(eslint-plugin): revert #11127 (#11447)
  • 8dc8340 feat(eslint-plugin): add no-unnecessary-type-conversion to strict-type-checke...
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.29.1 to 8.40.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.40.0

8.40.0 (2025-08-18)

🩹 Fixes

  • typescript-eslint: export plugin, parser, and configs that are compatible with both defineConfig() and tseslint.config() (#11475)
  • typescript-estree: correct range of import assertion with trailing comma (#11478)
  • utils: correct calculateConfigForFile return type (#11451)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.39.1

8.39.1 (2025-08-11)

🩹 Fixes

  • typescript-eslint: handle file:// urls in stack trace when inferring tsconfigRootDir (#11464)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.39.0

8.39.0 (2025-08-04)

🚀 Features

  • update to TypeScript 5.9.2 (#11445)
  • eslint-plugin: [naming-convention] add enumMember PascalCase default option (#11127)
  • eslint-plugin: add no-unnecessary-type-conversion to strict-type-checked ruleset (#11427)
  • eslint-plugin: [only-throw-error] support yield/await expressions (#11417)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] ignore check option for most RHS of a chain (#11272)
  • eslint-plugin: [no-unsafe-assignment] add an unsafeObjectPattern message (#11403)

❤️ Thank You

... (truncated)

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.40.0 (2025-08-18)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.39.1 (2025-08-11)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.39.0 (2025-08-04)

🚀 Features

  • update to TypeScript 5.9.2 (#11445)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

8.38.0 (2025-07-21)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.37.0 (2025-07-14)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.36.0 (2025-07-07)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.35.1 (2025-06-30)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.35.0 (2025-06-23)

... (truncated)

Commits
  • 60c3b26 chore(release): publish 8.40.0
  • b2ee794 chore(release): publish 8.39.1
  • c98d513 chore(release): publish 8.39.0
  • 2112d58 feat: update to TypeScript 5.9.2 (#11445)
  • d11e79e chore(release): publish 8.38.0
  • 816be17 chore(release): publish 8.37.0
  • 84b7a2e chore(release): publish 8.36.0
  • e2ecca6 chore: fix issues introduced by updated nx configuration (#11230)
  • f9bd7d8 chore(release): publish 8.35.1
  • d19c9f3 chore(release): publish 8.35.0
  • Additional commits viewable in compare view

Updates @vitejs/plugin-react from 4.3.4 to 5.0.0

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@5.0.0

(Same content as v5.0.0-beta.0 https://github.com/vitejs/vite-plugin-react/releases/tag/plugin-react%405.0.0-beta.0)

Use Oxc for react refresh transform in rolldown-vite

When used with rolldown-vite, this plugin now uses Oxc for react refresh transform.

Since this behavior is what @vitejs/plugin-react-oxc did, @vitejs/plugin-react-oxc is now deprecated and the disableOxcRecommendation option is removed.

Also, while @vitejs/plugin-react-oxc used the production JSX transform even for NODE_ENV=development build, @vitejs/plugin-react uses the development JSX transform for NODE_ENV=development build.

Allow processing files in node_modules

The default value of exclude options is now [/\/node_modules\//] to allow processing files in node_modules directory. It was previously [] and files in node_modules was always excluded regardless of the value of exclude option.

react and react-dom is no longer added to resolve.dedupe automatically

Adding values to resolve.dedupe forces Vite to resolve them differently from how Node.js does, which can be confusing and may not be expected. This plugin no longer adds react and react-dom to resolve.dedupe automatically.

If you encounter errors after upgrading, check your package.json for version mismatches in dependencies or devDependencies, as well as your package manager’s configuration. If you prefer the previous behavior, you can manually add react and react-dom to resolve.dedupe.

Remove old babel-plugin-react-compiler support that requires runtimeModule option

runtimeModule option is no longer needed in newer babel-plugin-react-compiler versions. Make sure to use a newer version of babel-plugin-react-compiler that supports target option.

Require Node 20.19+, 22.12+

This plugin now requires Node 20.19+ or 22.12+.

plugin-react@5.0.0-beta.0

Use Oxc for react refresh transform in rolldown-vite

When used with rolldown-vite, this plugin now uses Oxc for react refresh transform.

Since this behavior is what @vitejs/plugin-react-oxc did, @vitejs/plugin-react-oxc is now deprecated and the disableOxcRecommendation option is removed.

Also, while @vitejs/plugin-react-oxc used the production JSX transform even for NODE_ENV=development build, @vitejs/plugin-react uses the development JSX transform for NODE_ENV=development build.

Allow processing files in node_modules

The default value of exclude options is now [/\/node_modules\//] to allow processing files in node_modules directory. It was previously [] and files in node_modules was always excluded regardless of the value of exclude option.

react and react-dom is no longer added to resolve.dedupe automatically

Adding values to resolve.dedupe forces Vite to resolve them differently from how Node.js does, which can be confusing and may not be expected. This plugin no longer adds react and react-dom to resolve.dedupe automatically.

If you encounter errors after upgrading, check your package.json for version mismatches in dependencies or devDependencies, as well as your package manager’s configuration. If you prefer the previous behavior, you can manually add react and react-dom to resolve.dedupe.

Remove old babel-plugin-react-compiler support that requires runtimeModule option

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

5.0.0 (2025-08-07)

5.0.0-beta.0 (2025-07-28)

Use Oxc for react refresh transform in rolldown-vite

When used with rolldown-vite, this plugin now uses Oxc for react refresh transform.

Since this behavior is what @vitejs/plugin-react-oxc did, @vitejs/plugin-react-oxc is now deprecated and the disableOxcRecommendation option is removed.

Also, while @vitejs/plugin-react-oxc used the production JSX transform even for NODE_ENV=development build, @vitejs/plugin-react uses the development JSX transform for NODE_ENV=development build.

Allow processing files in node_modules

The default value of exclude options is now [/\/node_modules\//] to allow processing files in node_modules directory. It was previously [] and files in node_modules was always excluded regardless of the value of exclude option.

react and react-dom is no longer added to resolve.dedupe automatically

Adding values to resolve.dedupe forces Vite to resolve them differently from how Node.js does, which can be confusing and may not be expected. This plugin no longer adds react and react-dom to resolve.dedupe automatically.

If you encounter errors after upgrading, check your package.json for version mismatches in dependencies or devDependencies, as well as your package manager’s configuration. If you prefer the previous behavior, you can manually add react and react-dom to resolve.dedupe.

Remove old babel-plugin-react-compiler support that requires runtimeModule option

runtimeModule option is no longer needed in newer babel-plugin-react-compiler versions. Make sure to use a newer version of babel-plugin-react-compiler that supports target option.

Require Node 20.19+, 22.12+

This plugin now requires Node 20.19+ or 22.12+.

4.7.0 (2025-07-18)

Add HMR support for compound components (#518)

HMR now works for compound components like this:

const Root = () => <div>Accordion Root</div>
const Item = () => <div>Accordion Item</div>

export const Accordion = { Root, Item }

Return Plugin[] instead of PluginOption[] (#537)

The return type has changed from react(): PluginOption[] to more specialized type react(): Plugin[]. This allows for type-safe manipulation of plugins, for example:

// previously this causes type errors
react({ babel: { plugins: ['babel-plugin-react-compiler'] } })
</tr></table> 

... (truncated)

Commits
  • 9e4a944 release: plugin-react@5.0.0
  • 61d777d fix(deps): update all non-major dependencies (#670)
  • 7d3a57a release: plugin-react@5.0.0-beta.0
  • 9ffd86d fix(react): use development jsx transform for NODE_ENV=development build (#...
  • 133d786 feat: merge plugin-react-oxc into plugin-react (#609)
  • 26326b3 feat!: support including files in node_modules (#306)
  • 9ce3b22 fix(deps): update all non-major dependencies (#593)
  • cadd7d2 fix!: remove resolve.dedupe (#586)
  • 005f16e refactor!: remove old babel-plugin-react-compiler support (#584)
  • b9efa3f refactor!: bump required node version to 20.19+, 22.12+ and drop CJS build (#...
  • Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 3.1.1 to 3.2.4

Release notes

Sourced from @​vitest/coverage-v8's releases.

v3.2.4

   🐞 Bug Fixes

Technical Details
ID: 5770844
UUID: 3333245078
Node ID: PR_kwDOOT3xzM6kPVNX
Host: GitHub
Repository: dbit-dev/deployment-boilerplate